$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: it6oKk+IxzSviYqaPA/cWCvOMjD7ivCoK3hRdgCSPC4= Subject key identifier: 08:72:92:D2:8F:6C:58:CC:48:FE:ED:0C:34:DA:89:70:9D:C2:AE:19 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 01962ABC83A31DA3ADE870D96D6CC5D93DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 14EE Signing time: Sat 12 Apr 2025 16:01:59 +0000 Manifest this update: Sat 12 Apr 2025 16:01:59 +0000 Manifest next update: Sun 13 Apr 2025 16:01:59 +0000 Files and hashes: 1: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 2: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 3: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 4: EFQvVvsmK2CnxaFWECLQzIRuaoA.roa (hash: z5MySgQN1+YGDxUko6xG8KGFZh9NwMFl3FNcAcreE/w=) 5: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 6: aQrQOxkAHRHWvV6SAv8MhUo2FEk.roa (hash: A+zK69O6Xa28jcWgz6jSMTN0CwLXk1uRy8YJFifVFB8=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: jtloUH3GHj6agPnwXpuohh661-Y.roa (hash: KrxUqRlvQiFZKDH37ecvZbfFbOWCQq6UJlz8kh7LUL8=) 9: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: +BZvLNC1S6UmT6HBdz+nEm/y+uiO7mM88kDT/Qa7G+I=) 11: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) 12: v40G9p22ghWMe8UKdX_wMiyNMek.roa (hash: jreCJmIVZHIjE2eJf4y2q1RHo2Hv3JjWpFOiAElZPd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Apr 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2a:bc:83:a3:1d:a3:ad:e8:70:d9:6d:6c:c5:d9:3d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Apr 12 16:01:59 2025 GMT Not After : Apr 13 16:01:59 2025 GMT Subject: CN=087292d28f6c58cc48feed0c34da89709dc2ae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:18:31:9b:65:da:09:9b:90:36:77:99:d3: d1:5e:98:d6:03:de:ed:2e:18:0e:34:ea:14:8c:4d: 0e:32:2b:31:eb:5d:ad:77:4b:cb:7f:2d:3e:d9:0c: 8d:8a:1b:9a:9d:df:4e:38:8e:cd:6d:eb:b1:74:0b: ed:fe:0c:9a:57:39:c1:7b:f3:72:9e:43:03:1a:e3: 63:ef:b2:d8:a7:8d:b2:c7:53:77:87:4f:9f:f0:63: 95:2d:75:a6:8d:b9:39:79:44:0f:52:52:48:71:20: 05:9f:86:82:0f:fb:94:03:a2:1b:d9:6b:c0:4d:69: e6:c4:5a:10:0d:7a:e4:6e:97:97:4d:00:15:f8:d6: e5:40:bb:f7:fd:d7:19:90:86:75:13:7d:08:8f:b9: 61:d8:29:13:ad:33:ab:81:db:fb:5e:57:8c:8b:cb: 6f:f5:c0:0a:18:80:3e:47:12:6b:09:b4:2c:b9:da: d6:7d:62:07:69:ec:6c:4e:91:36:8e:cc:d3:7f:97: ac:07:ef:e1:72:57:0b:2f:2a:1a:25:b7:81:65:a0: 59:75:53:5b:d6:d9:bf:7e:99:4b:8c:28:e7:96:6f: c6:6d:5f:21:15:18:82:55:b1:7f:7b:92:4e:99:86: 69:46:0d:43:6a:55:7e:bc:bb:35:9c:6a:1b:c0:e5: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:92:D2:8F:6C:58:CC:48:FE:ED:0C:34:DA:89:70:9D:C2:AE:19 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:e1:02:f1:2c:59:07:40:e6:62:82:6f:35:ee:42:d8:9d: 75:79:ba:25:6a:05:96:b6:ff:28:12:3c:38:7a:5b:48:64:6a: 2b:bd:1f:db:66:57:53:49:6b:e4:b7:07:1e:15:88:6a:de:0d: 67:e3:9c:5b:78:bc:14:f6:da:64:7d:9c:17:94:6c:c2:e7:f6: 10:84:59:a7:de:6b:85:6a:8c:b8:b5:8c:0e:0a:c7:ef:c5:cd: a9:84:8b:84:64:b9:1c:e4:b3:9c:58:f9:5f:90:2d:62:d7:5a: b2:9a:62:0a:94:08:71:bd:c1:9f:d2:00:71:7f:ba:f4:9d:9d: a7:1d:24:2e:d7:0a:2f:d6:f0:1c:8a:87:98:83:72:28:b5:a7: aa:d4:b1:5b:e0:13:c9:d2:bf:28:c3:b2:8c:a0:34:4c:8b:81: f1:a1:1d:42:25:c1:97:aa:01:61:1e:5f:17:dc:59:78:5b:1e: 37:b4:6a:d6:a9:f8:b1:73:fa:60:71:fe:ae:f4:ea:41:fb:bb: 05:1e:9a:f9:69:01:4c:fb:73:63:ec:14:29:b9:cc:3d:b4:40: b0:39:4e:6a:89:77:46:29:67:5f:2d:7d:63:ae:a6:ba:08:c1: 46:09:69:94:e2:00:ed:63:13:cc:9c:83:b2:b5:df:70:65:57: 29:b5:cf:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYqvIOjHaOt6HDZbWzF2T3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUwNDEyMTYwMTU5WhcNMjUwNDEzMTYwMTU5WjAzMTEwLwYDVQQD EygwODcyOTJkMjhmNmM1OGNjNDhmZWVkMGMzNGRhODk3MDlkYzJhZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV8YMZtl2gmbkDZ3mdPRXpjWA97t LhgONOoUjE0OMisx612td0vLfy0+2QyNihuand9OOI7NbeuxdAvt/gyaVznBe/Ny nkMDGuNj77LYp42yx1N3h0+f8GOVLXWmjbk5eUQPUlJIcSAFn4aCD/uUA6Ib2WvA TWnmxFoQDXrkbpeXTQAV+NblQLv3/dcZkIZ1E30Ij7lh2CkTrTOrgdv7XleMi8tv 9cAKGIA+RxJrCbQsudrWfWIHaexsTpE2jszTf5esB+/hclcLLyoaJbeBZaBZdVNb 1tm/fplLjCjnlm/GbV8hFRiCVbF/e5JOmYZpRg1DalV+vLs1nGobwOUMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhyktKPbFjMSP7tDDTaiXCdwq4ZMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJfhAvEs WQdA5mKCbzXuQtiddXm6JWoFlrb/KBI8OHpbSGRqK70f22ZXU0lr5LcHHhWIat4N Z+OcW3i8FPbaZH2cF5Rswuf2EIRZp95rhWqMuLWMDgrH78XNqYSLhGS5HOSznFj5 X5AtYtdasppiCpQIcb3Bn9IAcX+69J2dpx0kLtcKL9bwHIqHmINyKLWnqtSxW+AT ydK/KMOyjKA0TIuB8aEdQiXBl6oBYR5fF9xZeFseN7Rq1qn4sXP6YHH+rvTqQfu7 BR6a+WkBTPtzY+wUKbnMPbRAsDlOaol3RilnXy19Y66mugjBRglplOIA7WMTzJyD srXfcGVXKbXPSQ== -----END CERTIFICATE-----Generated at Sat Apr 12 18:22:13 2025 by rpki-client